#T1583.006 Web Services
Technique
- Tactics: Resource Development
- Description:
Adversaries may register for web services that can be used during targeting. A variety of popular websites exist for adversaries to register for a web-based service that can be abused during later stages of the adversary lifecycle, such as during Command and Control (Web Service), Exfiltration Over Web Service, or Phishing. Using common services, such as those offered by Google, GitHub, or Twitter, makes it easier for adversaries to hide in expected noise.(Citation: FireEye APT29)(Citation: Hacker News GitHub Abuse 2024) By utilizing a web service, adversaries can make it difficult to physically tie back operations to them.
- First Seen: AppleJeus: Analysis of North Korea’s Cryptocurrency Malware • 2021-02-17
-
8
Tagged Reports
-
5
Unique Authors
-
1,886
Active Days
Tagged Reports
2026-04-17
Break Glass Intelligence
2026-01-13
Cyfirma
2025-11-26
Socket
2025-08-13
Cyfirma
2025-02-12
Cyfirma
2024-09-12
Cyfirma
2021-12-02
SOCRadar